Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/1/3137392e3132352e3132362e302f32332d3233203d3e20323632343934.roa
File:                     3137392e3132352e3132362e302f32332d3233203d3e20323632343934.roa (raw, json)
Hash identifier:          ZfWaPkUXCWFk1tPQ9Czh5TQZB0TYxGcVs98e2vjiD7s=
Subject key identifier:   0F:76:21:A9:B2:13:F0:7A:5B:5A:87:AF:46:DA:7D:91:CF:ED:74:8F
Certificate issuer:       /CN=49AA284BEBE852D687076D4B25B70312FE52274D
Certificate serial:       6AE1020B97DD54DA1129DC9D72AE374437EEAD3A
Authority key identifier: 49:AA:28:4B:EB:E8:52:D6:87:07:6D:4B:25:B7:03:12:FE:52:27:4D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/49AA284BEBE852D687076D4B25B70312FE52274D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/1/3137392e3132352e3132362e302f32332d3233203d3e20323632343934.roa
Signing time:             Wed 03 Apr 2024 19:00:03 +0000
ROA not before:           Wed 03 Apr 2024 18:55:03 +0000
ROA not after:            Thu 03 Apr 2025 19:00:03 +0000
asID:                     262494
IP address blocks:        179.125.126.0/23 maxlen: 23

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:e1:02:0b:97:dd:54:da:11:29:dc:9d:72:ae:37:44:37:ee:ad:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49AA284BEBE852D687076D4B25B70312FE52274D
        Validity
            Not Before: Apr  3 18:55:03 2024 GMT
            Not After : Apr  3 19:00:03 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:62:b9:ed:81:5c:26:4a:c3:78:78:bc:e5:f3:
                    01:25:64:63:b4:82:21:5c:4a:c5:59:ec:3a:e1:43:
                    5c:9a:f1:d3:6c:37:88:eb:9a:75:2f:b0:bd:ac:34:
                    ee:6b:37:72:bb:0a:0c:22:7e:96:d5:0a:66:48:a0:
                    07:08:2a:a3:c7:9b:bb:e2:d2:9f:d5:b0:ea:a0:aa:
                    61:c4:a1:34:1c:ed:1b:4b:63:56:5b:53:ee:96:d1:
                    b5:d7:bb:da:49:42:9f:b4:d5:75:16:4a:0e:33:6a:
                    81:fb:6a:09:80:a1:5f:70:a5:0c:fe:53:8f:b8:5a:
                    07:f7:9c:56:f3:78:e5:2f:c1:ba:b2:8b:91:01:6c:
                    22:85:21:a3:15:94:8b:e0:33:04:c9:8c:be:13:68:
                    39:be:0d:3e:2f:25:95:1f:82:31:d7:bf:bf:23:92:
                    15:84:79:12:94:10:cf:c6:fd:f0:cc:4f:aa:d2:66:
                    b5:e1:7c:1e:56:3e:3a:0a:bc:e8:1e:3f:c2:5d:42:
                    36:59:1f:dc:c3:6b:3a:43:dc:d3:77:bf:56:c3:ef:
                    9f:7a:16:77:90:dc:b2:2a:53:03:98:85:6c:f7:4b:
                    9f:f8:25:c4:a9:f1:ac:a6:a6:7c:41:dd:79:90:4a:
                    51:c3:bf:85:30:b1:8f:ff:50:cf:c8:7d:92:ef:80:
                    99:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:76:21:A9:B2:13:F0:7A:5B:5A:87:AF:46:DA:7D:91:CF:ED:74:8F
            X509v3 Authority Key Identifier:
                keyid:49:AA:28:4B:EB:E8:52:D6:87:07:6D:4B:25:B7:03:12:FE:52:27:4D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/1/49AA284BEBE852D687076D4B25B70312FE52274D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/49AA284BEBE852D687076D4B25B70312FE52274D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/1/3137392e3132352e3132362e302f32332d3233203d3e20323632343934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.125.126.0/23

    Signature Algorithm: sha256WithRSAEncryption
         9c:c0:16:da:92:c2:15:b7:97:08:2f:de:61:e3:83:17:fe:cc:
         cd:8d:e1:02:99:5c:11:be:4b:5a:7a:7a:33:18:7a:29:59:c1:
         57:9b:c5:ea:9f:3c:a1:c0:b5:48:b3:00:69:24:6d:fb:83:35:
         6d:a9:df:16:c2:6a:c9:43:69:29:6d:2b:97:2f:6c:01:d9:d3:
         ec:38:43:4f:63:2a:be:81:d8:60:06:4c:79:ad:b7:18:58:e5:
         93:7b:36:8a:73:33:29:91:4d:32:ea:30:7a:91:b4:d5:19:86:
         d8:1d:44:24:68:94:53:1e:27:f3:92:b2:27:6d:f0:44:12:f6:
         58:6e:2b:02:6e:21:42:16:d9:cf:a4:d1:91:1f:b9:eb:e4:17:
         3a:36:e6:c0:2d:04:31:db:08:ac:01:0e:d0:38:03:ac:cd:2b:
         3f:c6:d7:a9:b9:5e:72:0e:7d:50:ce:2f:d9:01:5b:f6:47:18:
         17:e8:f1:de:53:ce:59:91:1f:4d:ea:6c:f5:dc:b6:62:29:c5:
         f3:ca:f5:7e:4e:90:92:cf:9a:11:fe:1f:9b:25:a3:1b:ee:e2:
         4a:bb:e9:70:21:5b:7b:e0:1b:78:3e:b1:5b:ea:42:16:f2:67:
         34:af:b5:84:af:48:d2:b8:f1:ef:a4:bf:01:c6:ec:19:79:77:
         02:86:0b:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----